Please wait while the page is being loaded Skip this advertisement >
Sunday | 23 November, 2008
CIO
Those Who Do Not Learn from History are Doomed to Repeat It
Deloitte Touche Tohmatsu forensics expert Tim Phillipps knows all too well just what devastation the twin ills of useless management information and a lack of strong governance can bring down on a corporation's head.
Sue Bushell 07 August, 2003 10:50:23

A Damning Report

HIH collapsed in March 2001, with estimated debts of up to $5.3 billion. Facing growing pressure from shareholders, creditors and policyholders alike, the government set up a Royal Commission to examine whether decisions or actions of directors, officers or associated advisers contributed to the failure or whether any of those involved were involved in any undesirable corporate governance practices. The commission was also charged with examining the adequacy and appropriateness of arrangements for the regulation and prudential supervision of general insurance at Commonwealth, state and territory level. Justice Owen delivered his report in April 2003, recommending among other things changes to the Corporations Act that could make middle managers, contractors and possibly advisers legally liable in the event of a corporate collapse.

The report prompted a wave of law reform and a strengthening of the corporate governance framework through the ASX Governance Council's "comply or explain" approach to its new best practice guidelines. And the ramifications of the collapse contain important lessons for CIOs across the spectrum of Australian industry.

"The Royal Commission described the various pathologies of a chronically mismanaged group of companies as a massive post mortem," Dellit says. "Some of that post mortem deals with the sustained inadequacies of the IT systems intended to support the various business lines of the HIH group of companies. Apparently, both the HIH and FAI IT systems at various points, or for sustained periods, were unable to generate the financial data and calculations necessary for the effective functioning of a diversified insurance group."

In fact Justice Owen found three areas of deficiency in management information: in HIH's electronic financial systems, in its reconciliation of ledger and bank accounts, and in its budgets. "The importance of maintaining information and accounting systems capable of producing and retaining accurate financial information is recognised in the Corporations Act 2000," he noted. "Under the legislation in force prior to its demise, HIH was obliged to maintain financial records that correctly recorded and explained its financial position and performance and enabled true and fair financial statements to be prepared and audited."

Unfortunately, there were problems in HIH's reconciliation of ledger and bank accounts extending over a long period, with senior personnel in the financial services division acknowledging significant and ongoing problems with data reconciliation resulting from system problems. The problems were so profound that even after considerable effort in 2000 to rectify the situation, numbers of accounts remained unreconciled at the date of appointment of provisional liquidators.

"It is extraordinary that HIH was not able to carry out a comprehensive reconciliation of all its balance sheet ledger accounts between late 1996 and March 2000," Justice Owen said. "Given the effect that unreconciled accounts may have had on HIH's internal and external financial reporting, it was not enough simply to complete material reconciliations."

HIH also consistently failed to meet budget - a reflection of a serious breakdown in its internal financial controls.

And thanks largely to a long history of M&A activity, at the time of its collapse HIH operated numerous insurance and accounting systems to manage its insurance business. They included an Oracle system for general ledger, purchased after the CIC take-over; the Aegis system acquired by HIH during the take-over of FAI and used to hold policy details and claims histories for FAI business; the liability and indemnity recording system contained the data for a number of HIH portfolios, including professional indemnity, public liability, trade credit and builders warranty; and finally, the GEN+ system developed by HIH to bring together the existing systems in order to provide greater functionality and to meet year 2000 compliance requirements.

The introduction of GEN+ proved extremely problematic. It led to numerous problems across the organisation which continued right through until 2000 when a February internal audit report noted a significant number of unreconciled bank accounts across the group that related to the implementation of GEN+.

Justice Owen found despite efforts to resolve the problems and the introduction of manual procedures to produce accurate financial information, HIH's ability to operate effective credit control and debtor management processes was impaired as a result of the problems with GEN+. Further, the manual processing was expensive and provided the temptation to capitalise costs that should have been expensed. He also found problems in HIH's reconciliation of ledger and bank accounts extending over a long period, and a continuing failure to meet budgetary targets that indicated fundamental problems in the business strategy or underlying performance of the business.

Related Features
  • +

    Ticked Off at Tick the Box Mentality 04 February, 2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
Additional Resources
Featured Whitepaper Sponsors
Market Place
 
Featured Whitepapers

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Chris Hoff on Virtualization and Cloud Computing 20 November, 2008 10:55:00

    Chris Hoff, chief security architect for the systems and technology division at Unisys and an advisor on the Skybox Security customer advisory board, is one of the biggest critics of virtualization security out there. Not because it isn't important - but rather because it is vital and needs to mature rapidly.
  • +

    Cybersecurity is focus of new start-up incubator 20 November, 2008 07:19:00

    Texas uni announces the Institute for Cyber Security.
    The University of Texas at San Antonio Tuesday announced a technology incubator aimed at fostering IT security-based start-ups within the state.
  • +

    Dilip Sarangan on Physical Security M&A 20 November, 2008 11:18:00

    Dilip Sarangan tracks physical security companies for Frost & Sullivan. He expects the industry's "need to have" products to weather the economic storm well, with the big players (now including IBM and Cisco) looking for value-priced acquisitions.
  • +

    International Challenges in PCI Security 20 November, 2008 09:15:00

    In a country that's seen many regulatory compliance challenges this decade, the headaches of PCI security tend to be analyzed from a largely American perspective.
  • +

    PCI council sharpens oversight of security auditors 19 November, 2008 10:53:00

    Quality assurance plan targets security assessors and scanning vendors
    The PCI Security Standards Council Monday unveiled a plan to sharpen oversight of the hundreds of security-service providers now authorized to evaluate merchant networks under the organization's Payment Card Industry data standards.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Solve Exchange Mailbox Storage Issues Once and for All

Join industry expert Bob Spurzem and Chuck Arconi of Fox Hollow to discover how to reduce Exchange total storage and keep it at a manageable level. Learn how Exchange storage growth can be contained without sacrificing security and accessibility.